Security

[Matthew-Wise]

Make sure we are promoting good and secure practices.

One tool for checking would be - https://observatory.mozilla.org/

[TimGeyssens]

Yes! Just stumbled upon this web.config best practices setup: https://github.com/h5bp/server-configs-iis/blob/master/dotnet%204.5/MVC5/Web.config (security is part of it)

[louisjrdev]

Also maybe a MFA implementation too?

[TimGeyssens]

for backoffice? Good idea!

[louisjrdev]

Yeah! Hopefully encourages more people to implement it 👍

[TimGeyssens]

good stuff, yeah! Will add it to tracker once I start setting up the tasks